Privacy
Your account
The site stores your lowercase email and username, first name, optional last name, optional birthday month and day, password hash, account status, verification and creation dates, and last login. Your username is public when you contribute; the other fields are visible only to the owner. Birth years are not requested.
A necessary HTTP-only login cookie holds a random session token. The database stores only its hash. Sessions expire after seven idle days and absolutely after thirty days.
Mailjet processes account and post-reminder messages. Open and click tracking are disabled. Delivery identifiers and delivery state may be retained; email opens and link clicks are not collected. Unsubscribing from reminders never disables login or posting.
Traffic
Traffic analytics are anonymous aggregates. The visit counter uses a scope-specific hash derived from the server-observed address, browser user agent, and a private salt. Raw addresses are never stored, the hash is never linked to an account, and inactive counter sessions are removed after 24 hours. There is no per-reader page-view history and no advertising tracker.
Deletion
Deleting your account revokes sessions and tokens, unsubscribes the address, erases private profile and password data, and labels existing contributions “Former member.” Aggregate traffic cannot be tied back to an account.